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for 

virtual roiicy ouiicier 






Yov IP addm it uHd to hif^ Mirtilr ««ty«v iiKn*« cirt. 


OMi IW|r to InlMVMMIiV MM tfipl^MnB MrtV^ HMN'nB tothllr plfeMnOMAMHlil 
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Privacy Statement 
for 

Virtual Policy Builder 




CofitscbnQ ttM Wib Site 

tf you have any ques5of« riwul Ml priwsqr ■Mement, the prac^^ 
your dufin(|s wKh Out Web vtet you can conlid 

VktiaiWortSiMce 
250 East 8h Sfreet 
SdtoeiO 

SL Paul. MN 55101 
ai^vfa1uri\M)ilBpsce.ooin 
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Choosing a Screen 
Identity 










Choose a screen name and identity for the training 
session by clicking on the screen name listed t>elow 






Screen Names: 
Sasha: the warrior princess 
Alvin: the truck driver 
Josh: the surfer dude 
William: the investment banker 
Alice: the domestic engineer 
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Choosing a Screen 
Identity 




Your trainino session number is: 

The session number is used to track and reference the 

training session in the policy effectiveness module. 

Click on the training icon to enter the virtual training 
room. 






Cjraini^^ 
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Meet the 
Facilitator 


V 
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Click on the picture to 
meet and interact with 
the facilitator and the 
other participants for this 
training session. 

ed Real Audio to listen to 
)r introduce the participants 
ling rules. 
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Policy Suggestion 




Desktop Fincy 

Succcsted PbGicyt To cnnnrfy with bwi gowcxntng softwm pnMectKn fimi puacy 

^4ike oopks of niy aolhrnic iBkts cxpiicidy Midnox^ 
•Exchugc, tndc or tnosftr cojaiCT of niy loftwue Id ocben bi 

•Dovraload oopief of io(hw«c ifaM ixxxmlly midd bm to be pwchased 
•ihidwac snjr tuAwve fim tho IiAciuet without prior ■pprovvi 

wone - sazq4y tfificntA. 

Pnnctplc: The pnnciplc of pfcscsl choica xtstcs tfast cut reol decuiora Icod to tiaut 
tcnn resuft laay be a benefit bol ihe bog- tenn renih cn be vAa ■ bcoefit or. u oAea 

Do yoa agne eriisiitne widi IIk Hugertwl poficjr? 










Whjtdttnccs wodd jriM ouicc to die sdCfcstEd pofiQF? 
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<^u^ the program to: 

^ RflMcwpoBcy fsoomnHmWiQra Mid ststislics from prevMMn sessions 

3 Re<fiOTtidcilfiMulintanraflon on a topic of subject presented during the 
previous senion 

2 Tedwicil product support 
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Virtual Training 
Room 



Policy Feedback 

Alvin: No changes 
Josh: No changes 

William: > t hate getting an approval to download 
software. I want that section changed. 

Fadlitaton >Does the group think atx>ut downloading 
software and approvals? 

Josh: > Have to company make a list of approved 
software to download... Would that help you 
Will? Or do you want the option to download 



t anything? 

\ William: > I couM live with a list, as long as I can email 
the someone to approve of the software I 
want to have downtoaded. 
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Writing tiie Policy 
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Sug£uted PtoGqr: To oocnply wiA bws govcniiqg softwire pratection fion 
piracy onplofjrecs must ooci 

•Make copies of ny softwaie unless exfdkifly autlioiued. 

•Exchmge, tnde or liws&f oopies oftuy softmic to odien in 

cyberqnce. 

•Download oo|ncs of software that oormally would have to be 
purchased. 

•Purchase any software fioin the inteniet wdhout ptioi' approval 
If you CTCwwrter piiaied solb)wre or suspect software niay have been piHted, 
notify the system lidmtnisuator umtiedtately and ditlancit youndf fiom the 
real or suspected iU^al activity. 

Facilitator If 1 am correct, you want this section added to the policy? 
A fkt»> A 11 softwat (kntnloads cm be cpprwed by the system 

admirastrator. The user needs to emdl the system 
odmMstn^ to get appwvd for<h^filoa£ng the softvurt. 
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Vote on a Policy 
Recommendation 




To oo(n|riy witli Ism^ governing softwnc piotBCtioa froin pmcy employees 
must not: 

•Make copies of any software unless explicitly authorized. 
•Exchange, trade or transfer copies of any software to olhen in 
cyberspace. 

•Download copies of lofhvaie dot aonnany woold have to be 
purchased. 

■All software downloads can be ^iptoved by die systcin 
admmistiator. All netwofk user needs to email the system 
admtnistrattir to get appcovid befiaie downloading the software. 
•Puiehase any software fion die Internet widxwt prior appioval 
If you encounter pimed software oc suspect software may have been pirated, 
Qoufy the system administrator imniediacdy and dinaiR'c youisclf ftoro the 
real or suspected illegal activity. 

Do you agree or disagree wiffa the policy? 
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Policy Consensus 






To comply with tatws governing software protectioa fiotn piracy employees 
must not 

•Make copies of sty software unless e^idtiy authorized. 
•Exdiaqge, mde or Uau&fei copies of any software to olheis ui 

•Download copies of software that nonnally would have to be 
purchased. 

♦All software downloads can be approved by the system 
administrator. AH octwoik user needs to email the system 
admmtstrator to get approval before downioadisg die software. 
•Purchase any software firxn the Internet without prior approval 
If you encounter pirated software or suspect software may have been pirated, 
notify dw system adiwinislurtui tnniedttfely and distance youisdf fion the 
real or suspected dkstl wttvity. 
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1 \ Start Policy Exam 

1 1 Review Policy Training Materials 

1 1 End Session 
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Policy Training Exam 












What is spam? 






§ A slang tenn for an electronic contract 

B A luncheon meat 

s A slang tenn for junk e-maa 

1 A tenn used for dOMnloaifing files from the web 
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Training Feedback Form 




Was the sutiiect peittnett to your needs and toterests? 
Mo To some extent 
Very Much So 

Excdkot Satis&ctofy Diswriiftrofy 
Adequacy of Cotuse Content 
Length of Coone 
Adequacy of Couise Matcnala 
Adoqmcy of Learning Experience 
Adequacy of Finldics 

If any betorts oted '\insrtisfactoiy". please provide esqilanatioo: 
What was of least vidoe to yon m this aeininai? 

What was of most value to you in this seminar? 

How will yoo apply this leaning bade on the j<A? 

Would you recommend this coiine for other individaalsAeains? 
Yes No 
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Acceptable Use 
Agreement 






The UBcr a^ees to Sm fbOowno: 

1. AM jnfaniiitfcw stofed on ihc cooipwiy lyrtein ib fcf cdULitunrtL 

conipuvcr wwi dc bhwhtt xji ah ■uaetncs ■no sm naiinmiiB pcresnnBi 
pimqr. 

2. Um of tho computer lysteni for convneroMl pivposes is prahSMted. 

3. User aoooimtswtikii are issuod for the purpose of irakino (he oq 
(county, prograin. etc.) Web site wfl heve a desifputed primary user vrtw b 
respowJMe for contraHng access to the aumuiC TheprinHny user wO not 
share NsAier tospn and password wHh anyone outeide the oiQHiaflQnri unit, 
and in9 dunpe the passwwrd reQutaily. 

4. The compare server(s) system is an dedronic oommunity. Users are 
convnunity members arid as such must be oorwiderate of other users. Thus, 
users wfl attend to their own lies and directarics and lawe oOters alone. Uscn 
shel inform the system administrator, or the ManaQSf if a probleni arlsca wMi 
your account or the serwef(s). 

5. Users \MP be good steiiwrds of the clectrorfeenwroniiieni and <dl not 
waste space, compulino power or other user's lane. 

6. Bec«UMtNaia«neduca<tonileonmuni(y.iierearemanycNkken«4w 
have access to rateriils on the system. Ukefs hawe a responsSiHty to ensure a 
niaturtog amfponmeid for oir cMdrea Consequerdiy, users wO neittMr stare 
noi II Si WIS! iwiuerie, Mwitwe or OBicnne OBUBcaDnme iranEm on w 
system. Sutfi actions wl residl in prompt tenianafion of system priviegei. 

7. The oompany reserves the to review any material stared on 0w 
system and wfll remove any material wWch it belevsa violates and clement of 
this ayvemenL 
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Acceptable Use 
Agreement 








CONTmUE 

8. Ihe Gon^any op«ntes a rdbMe and effeclm oofTVulin^ 




networt. hcmever th« company docs not wairart that the system Mil meet any 
spM^k M*er ra^iranenl or M Om system wil be erm fte* or (0^^ 
The ooapwiy M nstbe fiibla (or «iy drect or indrao^ inadenW or 
coneequentW dMfMgn lustaimd or incuncd on ccamecSon «M 
inati9it|f to uw Sie oonpeny system. 

UserSiBprturc 




Date: 
Manager 




Internet mimI eddTcssc 

cock icons to accept or dedme 010 terms of the Acceptable Use PoBey. 


f 
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The End .... 


Thank your for participating in the 
policy training program. 
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User Profile 








Name: 

Employee Nufflbcn 

EmalAddran: 

SuffBcelMIAd^css: 

Empleyment iMus G-e- temp. onM, 

Trtte; 

Depaxtnwnt/Unll TMk 
M«iAd*«n: 




\ 




USB« PROFILE REPORTS 

User's Envlovment AqreeineRb aid ottief oontraob: 

Poicy Trainino and Exam stabn: 

PoScy Cofnpfi>nc0 Htetofy 

NetMKxfc Activity history 

SpocW NetvMctc Access or ftMhflM 

EmaB itorsga iflocsdw 

Oocument scccss level 

User Access to inclixft^ fafied lofl^n Bttetnpts 

Afl atteflipts to l3unch pwieged Bppfiraflons 

Any ctianges to cystsfncofiltaurilion pvMiMtn 

SoQwore tfcjwwJuBdi ft Ml tfw bltoiwt 






Software usage 
HardMwe usage 

Software present on e usei's MnrkstsSon 
User's cystem access and ceeurtiy status 

kJentify need tor kalrino 
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Software Compliance 



REPORTS 



Location of igftinttre 

Locjlwii of soPmcttb Kowtx <gr«fl>6nl8 



Type of 



Coofdraaon of softiwre Boense ■treetneoti with soflioare utHzaboo 



Prowdeita<tohai«ndflrwWc«lBis«itkafioofarioft>^ 



Sofhwafoo 

Appropf ta teneCT. ln«ppfopri ate ne t » and excessive use of sofhwafe. Iwrtuwre 
feaotyoea throuflftoot the efterpriM. 
Nun<><f ofpeoctewaiarKifaf •ooewtoioltwaraaopfc^^ 
Aocesatnne 

V8boofwft>wafebdnqu»ed«t«nr<iiie 
Identify need for upg«te< 



Proiectkx»fbfh«dw«.»c<hMOTandieeii^co«teftw«ett^^ 



PrtKlct hardware 



Re-ffDUte , — 

Peraonafly Instated or pcniitted«o<hiwretn»taB«aow 

Utflfeation of gyttem resouroes 
Identiy p<Xefitial pofcy rthngemerrts 
Identify tygtem trertds per departmeni use 
AflootlonofretotodcoatiPetotedtode pa rtn^ent 
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Audit 



To: PoiAcbnQViilvoin 
From: Sysevntoom 
RE: Audit Reminder 

Branch location: Minneapeiis 
Time: 11.20a.ffl. 
Date: May 20. 1998 

CC: PoteyefTedgviftoom 
PolAdm@virt.com 
LanQvidoom 



Audit Ri 


MUltS 


Violations: 




Dtscrepanctosx 




Click on the report icon to compk 


rte potey violation report d 
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Network Policy Compliance Notice 


( 
















Refsfence Number 


985h34 






Postftd-Oate: 


Men. 20 May 1998 16:17:36 -0500 (COT) 






To: 


Jane DoeQ ¥i rt com 








PoSQ^Adm ^vbloom 






Subject 


VKNanon Noooe 






N«t«vor 


fc Non-Compliance Notice 








Name: 










Emaii Address: 










Title: 










Department/Unit Tide: 








Branch/Division: 










Mail Address: 










Violatton: 










Violation Histoiy: (hyf 
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Network Compliance 
Action Notice 










The po&cy advisor has taken the potential violation into advisement and 
has defennined the foQowring procedures: 






This is a Level 2 violation 






FoOow the prampts to complete the violation reporting process for this 
level 2 violation. 


N 




C8ck to begin the violation reporting process. 
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Policy Compliance Report Form 






Violatoi's Name: 


Emaa address: 






Tide: 


Depaftmattt ^ 


Mail Station 


N 




Vtoiation: § Minor Vtoiation § Major Violation 
Type of Viotation: (ctxwse from drop dovm box ) 


1 1 


Branch Location: 
Date of Oocunwioe: 

OffidaJ reporting the incident 




Poik^ AdministfBter 

Additional details: 


1 Ok 1 t Reset 1 1 Caned I 
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Network Compliance 
Action Notice 




The policy advisor has takfin the potential violation into advisement and 
has detannined the foBowing pfocedures: 

This is a Level 1 violation 

FoSow the prompts to complete the violation reporting process for this 
level2violatk)n. 

CQcfc to begin the violaiion reporting process. 


^ (main MENU^(^^^SEND^ 
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Policy Knowledge Query 






Name: 


Violation:! Minof Violation i Ma jor Vioiation 
Type of Violation: (choose fmm drop down box ) 


f 




1 1 

Branch Location: 


Data: 


Poficv AdinnistratDr 


Additional details: 






1 Search I 1 Reset 1 1 Cancel i 


USER HELP^ Click icon for more infonnation on how to 
r"""^ respond to a violation report. 




1(7) (main MENU)(^SEND^^^ EXIT ^ 
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Policy Compliance Report Form 






ViolatofsName: 


Efnsil addrossi 






Title: 


Department: 


Maa Station 






Vioiation:§ Minor Violation | Major Violation 
Type of VioJation: (choose from drop down box) 


1 1 


Branch Location: 
Date of OccufTence: 

Date of report 




OfRdal reoortina the incident 




Additional details: 


1 Olc M Reset I I Cancel 1 




^ (<)(mainmenu)(^end^ exit ^ 
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Policy Violation Code and Report 








The datm you submitted has been assignetfSSha^ as teiBferw^ 

code. 

&Kiypt6d emal and surtace mafl copies of the policy violation daim 
report has bean sent to: 

'Jane Doe 

• John Sitttlh in Hunum Resources 

• System Policy Adnwustrator 

• Virtual Workspace, LLC • a third parly poficy oiganization 


(>J (^(mainmenu^(^end^(^ exit ^ 
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System Violation Notice 








EmaSa 


ndSnaaMaiD Notice 










Name: 


JaneOoe 






UserProfae: 


(Rewcw PraQs torn drop dOMn menu) 








Viotalion Type: 


&mtxtooaB wiffi confidanfiil Ifc 
aoactunem 








Violalion level: 


UveJ2 










Branch Location: 


MinneapoSs 










Time: 


1120 am 










Date: 


May 20. 1998 










CC: 


Jsnuth@ViTtcom 












PoiAdTTi@Virtcom 












PoltcyQyirtuaNMxkspace.oom 










RIe Attachments: 


Scheduling and violation report 










TIM system Mtestes you have >4aMedivMuaipafcy. Attached is a poSqf 












vtoiatton datm report for yota review. 












We wfl need your assistance to 


kwestHjate the daim to deterrnine if it b indeed 












aocurateandtfittirarFafitsftxIhcrciscussNn. Please fcOflW the pnioedures 
ijelaw: 












• Re^Aew Ihe attadied poBcy vMstion ctaon report 






1 






• Review your titer's VMaSonI 


"fstory 8e at http/AMWV.uscrvi.coni. 










• bidcita my dscrepandes n 


Uiy of the reports 










* Indtato your flvritabfitif for ■ 


kvperson foOaw up meeting 






1 






For Ibrtlwf nformstion dBck ttie 


«erleon(u^ 












AB report nd inwMliQsfion Mor 


nilifln is automatlcMly rocorded in the systenL 












Thank you tor your ooopeislton. 
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Subsequent Action Report 






Name: Jane Doe 

Violationlevel: Level 2 

Branch Location: Minneapofis 

Tone: 11:20 a.m. 

Date: May 20. 1998 

CC: Jsmilh@ViTtcom 
PoiAdm^VirL com 
PoficyQvirtuaKvorkspace.oom 

FBe Attadvnents: Subsequent Action Report 




FoOowing the violation meeting. Human Resources and the user are 
required to fae a sut)sequent meeting report to veri^ lhair attendance 
at the meeting. 

The report can be accessed by cOdcthereport loon <^^^ 

If you have any additional questions or concerns, you may contact the 
Policy Administrator via emaik PdAdm^ytrt-oom or by caOing 555- 
1212. 

If you do not agree with the outcome of the meeting, you may file for 
an appeal To begin the appeal process, dick on the appeal icon 
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The Appeal Process 






The Appeal Process giants the user du© piocess. incfcjding the 
opportunity to respond tD an alleged vwlation in writn^ 
given the option to choose an appeal facitator from the organization. 
The chosen fadlitatw is emailed and granted security and read^)n^ 
access to a user's fle. The fiwafitator is automatKaOy copied on all 
appeal process oommuntcations. The system records the all 
communications and written activity. 

Internal officers are automaticaay prompted and sent a notica to 
schedule the appeal meeting with the new fiidStator. The process Is 
reported, Stored, and tracked in the policy effBdiveness module. 

The appeal repoct is automatically sent to: 

• Policy Effectiveness 

• The poQcy officer and the user via email 

• The poGcy officer and (he user via snail mail 

The user is automatically sent intbrmation to tntonn him of his rights. 
To access Anther information. cGcfc on the appeal tcoi^^^^ 
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Policy Effectiveness Reports 

Compliance Reports 




Enter aocoss oodoi 
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Enter hsniwsrs toksni 
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Choose report(s) to review: 

UserAJser profiles 

Network nodes 

Oepaftment 

Division 

Branch 

Appitcation 

Tiine duration 

Timeframe based ok 

KGstorical and statistical reports 

Current 

Year-to-dat8 

Custom tune franies 

Other 
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Policy Effectiveness Reports 

Enterprise-Wide Reports 


- 


Enter aoeass code: 

1 1 

Enter ttardwsre token: 






1 1 

Choose report(s) to review. 

PoBcy oomptianoe reports 
Risk assessment 

Stnsngtttt arid weaknesses in policy oompliance 

and non-cofnpiiance 

Ema3 ootnpfianoe reports 

Software oompliance reporting 

Patterns, statistics and assessment of poQcy violations 

and non-compKanoe 
System backup rapoits 
Document traduno reports 
Audtt and nraondGafion reports 
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Policy Effectiveness Action 






Name: SystemAdmeVbtoom 

Violation level: Level 2 
Branch Location: Minneapoits 
Time: 11.20 a.m. 
Date: May 20. 1998 
CC: NetavofkeVirlcoffl 

Policyevif1iialwof1(spaca.oom 
FUe Attachments: PoGcy Eftadiveness Action Report 

Policy Efkctiveness has trapicmetttcd a policy change for pcnotul email 
usage. 

The oew policy set tbe (bOy peisoaal enaU usage at 3S mesiages vs. 
piwious 30 message limit Ibe pefsonal eraaU poticy cao be aeeessed it 
bdp://www.policyi^nonalema3.com 
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Policy Resources 
















1 \ Policy Reference Library 






1 h Legal Research 






1 1 The Virtual Policy Manual 






1 Policy Basics 






1 1 Software Resources 
including 

software listings and 
1 li updates 






1 \ Software Registration 






Tech and User Support 
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